This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/999HxJkyZ4gHy7bUfio6_iBqsCg.roa File: 999HxJkyZ4gHy7bUfio6_iBqsCg.roa (raw, json) Hash identifier: NdIs7A8SRLt2U9IvnlM6abFre8xeuVdomQoYCD/2ei0= Subject key identifier: F7:DF:47:C4:99:32:67:88:07:CB:B6:D4:7E:2A:3A:FE:20:6A:B0:28 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019BA4421BF71F638062EEC61D62FA937DC7 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/999HxJkyZ4gHy7bUfio6_iBqsCg.roa Signing time: Fri 09 Jan 2026 19:35:54 +0000 ROA not before: Fri 09 Jan 2026 19:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 45.11.10.0/24 maxlen: 24 45.13.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:42:1b:f7:1f:63:80:62:ee:c6:1d:62:fa:93:7d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 9 19:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7df47c49932678807cbb6d47e2a3afe206ab028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:f5:69:3a:aa:84:a5:ac:10:46:30:1e:0d: ac:55:e9:2b:32:bb:d5:f6:1f:45:25:1f:65:58:aa: 88:7e:01:16:80:ab:18:e6:b3:ce:50:99:70:47:05: 52:7f:52:c0:90:71:32:8c:d7:0a:0b:d3:da:9c:bd: f7:66:88:d3:6c:d0:05:3f:ff:86:e1:98:05:c3:43: ef:da:ac:a8:a4:5c:99:80:44:22:f5:37:f9:cc:7f: b0:8a:c0:4f:74:a6:eb:3b:95:db:11:b7:25:c7:3a: ef:6f:66:f2:ed:6b:4f:3f:9f:d1:b6:90:12:4a:cc: 6a:3f:dc:56:fe:8f:16:35:f2:4b:54:3e:d9:8c:81: 62:4c:f5:2f:61:5f:74:a4:9b:bc:fa:3f:26:5b:da: 73:be:bc:3b:77:e7:61:3c:02:9a:f1:5f:87:74:4e: a1:e6:3c:4e:3c:b5:1f:03:8b:c9:9f:1a:3d:fd:df: 8a:d2:ec:4c:ec:cc:c4:39:57:52:00:a8:b1:03:46: 2a:9e:aa:fa:0a:56:26:ca:8f:22:a9:b8:69:79:e4: 1d:38:3a:02:5b:37:a8:5b:2e:6f:5b:60:67:e5:b8: 0e:65:61:0c:9f:3a:4e:78:9f:fa:cc:84:43:09:30: ad:36:81:b1:ae:bf:c1:c6:03:eb:9e:8d:bb:ec:e8: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:47:C4:99:32:67:88:07:CB:B6:D4:7E:2A:3A:FE:20:6A:B0:28 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/999HxJkyZ4gHy7bUfio6_iBqsCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.10.0/24 45.13.180.0/24 Signature Algorithm: sha256WithRSAEncryption 70:56:aa:c5:5f:38:d3:5f:64:32:b9:a2:0a:71:ef:83:57:b7: bf:ba:71:a5:b5:d0:bc:1d:99:80:0a:48:f4:76:67:3b:60:9a: 83:cb:10:c2:c3:26:66:49:ea:4f:5c:c8:ae:55:2a:03:99:5e: a0:e6:36:45:d3:eb:cb:d8:b2:57:52:64:3c:e2:b9:7d:04:0f: 24:8c:b4:f6:b0:1f:4a:a4:da:10:31:b4:88:61:61:42:b8:99: 14:f5:5c:f0:66:38:e4:74:ea:be:86:55:3c:7f:ec:7d:34:6a: cc:61:72:49:db:ba:f9:94:03:f1:7f:72:c7:da:e8:0b:77:44: c2:e7:0d:75:2f:63:e1:be:4a:a3:7c:15:4a:5e:2e:3b:bc:74: d8:26:50:8b:de:6c:db:e7:9c:07:56:f7:27:a2:9d:07:c4:9c: 7f:f2:c8:7a:28:b7:46:23:2b:b6:f6:8e:20:95:c5:22:10:8a: 0e:79:6e:25:ee:4b:c4:d9:5e:fb:4c:ac:ca:fb:8d:17:7e:74: 6f:c0:5f:d5:49:52:29:92:0a:a8:df:8f:11:aa:a8:47:16:bb: f5:79:74:2d:04:52:c9:ce:4f:74:57:b3:18:83:21:c2:4b:61: bf:83:ab:45:d1:57:ca:2e:46:6e:1a:a4:c4:05:be:01:a2:74: 87:98:5b:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZukQhv3H2OAYu7GHWL6k33HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTA5MTkzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2RmNDdjNDk5MzI2Nzg4MDdjYmI2ZDQ3ZTJhM2FmZTIwNmFiMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuon1aTqqhKWsEEYwHg2sVekrMrvV 9h9FJR9lWKqIfgEWgKsY5rPOUJlwRwVSf1LAkHEyjNcKC9PanL33ZojTbNAFP/+G 4ZgFw0Pv2qyopFyZgEQi9Tf5zH+wisBPdKbrO5XbEbclxzrvb2by7WtPP5/RtpAS SsxqP9xW/o8WNfJLVD7ZjIFiTPUvYV90pJu8+j8mW9pzvrw7d+dhPAKa8V+HdE6h 5jxOPLUfA4vJnxo9/d+K0uxM7MzEOVdSAKixA0Yqnqr6ClYmyo8iqbhpeeQdODoC WzeoWy5vW2Bn5bgOZWEMnzpOeJ/6zIRDCTCtNoGxrr/BxgPrno277OisYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPffR8SZMmeIB8u21H4qOv4garAoMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvOTk5SHhKa3laNGdIeTdiVWZpbzZfaUJxc0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQsKAwQA LQ20MA0GCSqGSIb3DQEBCwUAA4IBAQBwVqrFXzjTX2QyuaIKce+DV7e/unGltdC8 HZmACkj0dmc7YJqDyxDCwyZmSepPXMiuVSoDmV6g5jZF0+vL2LJXUmQ84rl9BA8k jLT2sB9KpNoQMbSIYWFCuJkU9VzwZjjkdOq+hlU8f+x9NGrMYXJJ27r5lAPxf3LH 2ugLd0TC5w11L2PhvkqjfBVKXi47vHTYJlCL3mzb55wHVvcnop0HxJx/8sh6KLdG Iyu29o4glcUiEIoOeW4l7kvE2V77TKzK+40XfnRvwF/VSVIpkgqo348RqqhHFrv1 eXQtBFLJzk90V7MYgyHCS2G/g6tF0VfKLkZuGqTEBb4BonSHmFuW -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:02 2026 by rpki-client